This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
File:                     jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft (raw, json)
Hash identifier:          3AgWfMseGWjSGn/3OvcPxPw+GhUp5kO5eMyxw87vTs4=
Subject key identifier:   06:26:6E:7B:EA:88:06:09:F1:43:02:2F:2C:A6:37:EB:56:47:A9:C2
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Certificate issuer:       /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial:       019C438FC88350DF62A9F7D68A09A011455F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
Manifest number:          1520
Signing time:             Mon 09 Feb 2026 18:00:22 +0000
Manifest this update:     Mon 09 Feb 2026 18:00:22 +0000
Manifest next update:     Tue 10 Feb 2026 18:00:22 +0000
Files and hashes:         1: RXn30h9BpJvoZDBG_VhKAWNPT5w.roa (hash: e20aIXT8+TI5fnLf21yjBd8FPloZZbocy7TNGbWjDGk=)
                          2: eiBAjPlDdAEJJvNoTH-1fALVwBg.roa (hash: tHK9gw0NecINRkXtDNFXNpkwOaFhBnt8zEFuvT1+in8=)
                          3: jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl (hash: XQ6qTyKgLL2LdaOP68MJpqqan7gKUNgNWypsnBElRwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 15:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:43:8f:c8:83:50:df:62:a9:f7:d6:8a:09:a0:11:45:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
        Validity
            Not Before: Feb  9 18:00:22 2026 GMT
            Not After : Feb 10 18:00:22 2026 GMT
        Subject: CN=06266e7bea880609f143022f2ca637eb5647a9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ca:77:a5:fe:45:ab:4b:38:b6:41:f4:35:7f:
                    26:6c:68:43:da:25:62:d1:00:08:96:ea:62:ba:14:
                    6a:e2:64:69:b5:17:7c:92:36:c3:90:aa:f2:43:fa:
                    63:c9:a1:3e:97:03:1c:41:18:bb:9a:93:bd:0e:ac:
                    2f:7c:ae:3a:35:df:e9:23:0e:e8:b6:5e:42:f1:ae:
                    2e:ae:45:45:f6:e7:3a:3b:db:9a:1d:d8:d2:00:cb:
                    2c:84:1b:22:e5:a5:e6:71:b7:26:2a:52:d0:2c:66:
                    7a:78:f2:ad:f6:13:2a:1b:a9:c3:1a:47:ba:ce:2b:
                    41:f4:43:98:d8:d1:a0:c7:a7:60:5d:dc:12:90:bb:
                    26:41:5a:92:62:02:e3:39:6e:f6:22:8b:8d:ba:96:
                    47:ed:7a:0a:34:06:8c:dd:77:91:9f:ed:bc:23:5c:
                    d1:a1:f1:e2:75:78:52:30:90:9e:19:bf:17:d1:9f:
                    1a:59:9a:18:d6:2d:6c:a5:58:16:be:21:3d:f2:3a:
                    bf:b2:0c:b7:e6:7a:cb:19:30:3c:13:92:a2:4b:d5:
                    7c:66:5e:d8:25:f0:61:b8:83:04:88:5c:a8:95:9f:
                    b3:39:ea:30:c3:2b:50:68:0c:f5:83:d5:15:a5:34:
                    cb:ed:e7:ba:3e:fc:bf:3f:16:9e:ff:7e:b3:8b:95:
                    92:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:6E:7B:EA:88:06:09:F1:43:02:2F:2C:A6:37:EB:56:47:A9:C2
            X509v3 Authority Key Identifier:
                keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:0b:6d:02:81:f0:10:53:37:6b:dc:ea:6b:9b:14:c5:9a:a6:
         e3:49:4a:64:e5:38:20:5c:dd:72:c0:94:43:47:00:de:fb:7f:
         5d:2d:73:dc:62:ed:56:5b:dd:e2:c3:9a:42:7a:fb:3e:69:ce:
         4d:ee:93:0c:be:cc:d1:29:38:3b:2b:01:36:81:be:86:81:0b:
         49:fc:ba:3c:d4:81:7c:e0:4f:08:ee:48:61:a4:33:c6:dc:fd:
         27:1e:6b:e4:f5:ab:48:70:98:e1:ca:ff:ff:c9:0a:1a:21:30:
         67:8a:dc:f8:93:1d:08:38:e9:73:cc:d9:a3:a6:c4:0f:d4:83:
         ed:e1:6a:6a:4d:de:28:36:4a:f2:51:83:2d:f4:78:f6:72:95:
         78:76:1f:67:56:6a:42:98:b0:59:a6:04:2e:c8:3f:e5:55:c0:
         04:42:51:44:57:3b:67:f9:f8:1b:4f:bd:3c:e4:29:b3:d6:c3:
         a9:e8:2e:7e:2d:83:c7:cc:a4:a2:31:e2:5a:20:d2:95:23:d4:
         51:a8:10:11:f6:83:f4:15:63:7f:ad:1c:9e:b5:f6:82:b2:eb:
         1c:18:66:bf:28:fb:9a:78:a6:4a:61:26:b9:b5:53:2e:df:ee:
         19:0d:ba:9b:65:fc:cd:88:15:11:a7:6b:49:7f:6b:70:34:a2:
         b6:b8:72:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj8iDUN9iqffWigmgEUVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3
MDBjN2MwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD
EygwNjI2NmU3YmVhODgwNjA5ZjE0MzAyMmYyY2E2MzdlYjU2NDdhOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucp3pf5Fq0s4tkH0NX8mbGhD2iVi
0QAIlupiuhRq4mRptRd8kjbDkKryQ/pjyaE+lwMcQRi7mpO9DqwvfK46Nd/pIw7o
tl5C8a4urkVF9uc6O9uaHdjSAMsshBsi5aXmcbcmKlLQLGZ6ePKt9hMqG6nDGke6
zitB9EOY2NGgx6dgXdwSkLsmQVqSYgLjOW72IouNupZH7XoKNAaM3XeRn+28I1zR
ofHidXhSMJCeGb8X0Z8aWZoY1i1spVgWviE98jq/sgy35nrLGTA8E5KiS9V8Zl7Y
JfBhuIMEiFyolZ+zOeowwytQaAz1g9UVpTTL7ee6Pvy/Pxae/36zi5WSZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAYmbnvqiAYJ8UMCLyymN+tWR6nCMB8GA1UdIwQY
MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt
ZDg3YjcwMjZhM2ZmLzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm
LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWAttAoHw
EFM3a9zqa5sUxZqm40lKZOU4IFzdcsCUQ0cA3vt/XS1z3GLtVlvd4sOaQnr7PmnO
Te6TDL7M0Sk4OysBNoG+hoELSfy6PNSBfOBPCO5IYaQzxtz9Jx5r5PWrSHCY4cr/
/8kKGiEwZ4rc+JMdCDjpc8zZo6bED9SD7eFqak3eKDZK8lGDLfR49nKVeHYfZ1Zq
QpiwWaYELsg/5VXABEJRRFc7Z/n4G0+9POQps9bDqegufi2Dx8ykojHiWiDSlSPU
UagQEfaD9BVjf60cnrX2grLrHBhmvyj7mnimSmEmubVTLt/uGQ26m2X8zYgVEadr
SX9rcDSitrhywQ==
-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:33 2026 by rpki-client